Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa
File:                     ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa (raw, json)
Hash identifier:          N8NDEiLjHaP111YbZPBUN7TPI054Ycsmgplq9Yjv+N8=
Subject key identifier:   E0:93:CF:2B:F1:58:F7:DC:C7:5A:41:72:B2:A7:C6:EB:6B:1D:6E:0B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C7EEE171D3CB68462A460
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:7e:ee:17:1d:3c:b6:84:62:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=4d4eb1ff-a645-43fe-ab39-fa0e1191af77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:54:94:c8:0e:4d:cb:5a:dc:64:7b:20:a6:
                    16:76:83:78:88:75:f1:8d:f9:2a:93:46:e7:30:fe:
                    b9:a4:96:8a:6f:9f:37:3f:be:fa:ef:85:0d:a8:3a:
                    fa:fb:0f:58:d5:81:d6:0d:fe:22:46:dd:7c:56:13:
                    4b:9c:90:38:1a:bb:d2:03:06:6e:3e:0d:e2:7b:94:
                    c5:c4:d6:d8:8b:4c:d2:8c:ed:82:5d:1e:dd:f6:26:
                    2d:3d:61:da:15:cb:c7:5e:8d:67:f2:ed:e8:4d:b4:
                    a3:55:79:44:67:36:bf:78:d3:3f:09:e9:f2:e2:5d:
                    3d:53:ad:3c:f4:9c:a7:70:90:b3:34:54:a7:f5:21:
                    cc:ce:bf:16:0f:6b:3e:b0:77:fc:3b:e6:0d:94:b8:
                    0f:5b:69:43:86:26:92:bf:8d:50:a5:f7:e7:05:c2:
                    d7:59:32:2f:df:06:ff:ae:7d:00:bc:cc:28:73:b2:
                    8f:be:c0:72:b4:61:d5:aa:5e:ef:f0:9a:3a:aa:d8:
                    6c:e2:41:a6:1f:14:8c:18:e2:a1:a9:cd:9b:6d:ca:
                    dd:77:8e:59:46:16:d6:76:22:a7:2a:8d:95:45:59:
                    ef:f8:f8:fa:4f:e7:e2:70:0c:01:3b:b1:1f:38:64:
                    79:66:3b:1e:4e:8d:84:3b:09:0d:2e:00:a9:89:9a:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:93:CF:2B:F1:58:F7:DC:C7:5A:41:72:B2:A7:C6:EB:6B:1D:6E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:5a:83:16:1a:7a:47:20:76:b8:d2:1d:ff:ef:ad:c7:1b:
         2a:24:65:83:8a:82:76:2b:79:ae:b9:02:9c:d7:d0:b0:cf:de:
         19:f1:02:a6:a8:0b:37:1c:5b:92:90:66:95:86:5f:41:e9:8a:
         9a:33:77:87:d2:59:c6:88:89:7f:3c:5d:52:a8:08:ad:a8:c9:
         d2:55:2f:0f:20:cc:2b:c7:18:aa:46:39:20:29:7a:97:6b:35:
         65:7e:f9:17:b0:cb:69:5c:14:b7:8c:d2:18:f9:5e:3a:02:6a:
         80:1f:9b:d2:16:3b:f1:75:51:0e:96:b1:2a:e4:5b:2f:35:f9:
         89:12:02:65:1f:17:00:1d:fe:79:7e:b6:96:ce:44:03:e8:70:
         20:d2:18:95:99:15:90:71:f1:85:f6:0c:df:dc:e4:b9:11:ba:
         e9:31:9a:e2:16:9f:9c:4c:be:b0:fb:07:92:7b:55:ff:45:b4:
         f6:7e:94:53:44:9d:8e:79:9c:27:fa:84:cd:02:f1:2f:fd:53:
         ab:cc:37:43:98:1a:e7:92:0c:3a:d5:73:42:76:1f:29:52:73:
         ce:a3:46:44:e1:f5:7a:41:d1:0c:10:60:dd:e4:03:d1:38:ad:
         f3:a2:c7:12:cc:a9:d3:24:2c:85:f5:e9:0f:06:ec:97:69:e8:
         0e:18:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:13 2025 by rpki-client